2021-07-07

QSAN Storage Manager, XEVO, SANOS- Use of Hard-coded Password

ZUSOART ID

CVE-2021-32521

CVE ID

CVE-2021-32521

Vulnerability Type

CVSS 4.0 Base

7.3

Description

QSAN Storage Manager, XEVO, SANOS

使用MAC address作為密碼認證Hard-coded Password，攻擊者可取得高階使用者權限。

QSAN Storage Manager <= version 3.3.1 (build 202101041800)QSAN XEVO < version 1.2.0 (build 202007081800)QSAN SANOS <= version 2.0.0 (build 202012222000)

‍

Vendor

QNAP Systems, Inc.

Product